add failing test, depends on npm-registry-mock 0.3.0

test for #3823
update/outdated: don't access missing package info

avoid null dereferences checking the status of a currently installed
package

Fixes #3820, a regression caused by #3798 and #3578
v1.3.10